$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fa7db860-e731-3890-9953-1b3723ef2812.roa File: fa7db860-e731-3890-9953-1b3723ef2812.roa (raw, json) Hash identifier: Q4j1b70jKUcTW/ApngFQrOurvABin4iicB/ORZj5/mg= Subject key identifier: 0A:EB:64:F2:BC:C3:68:51:17:DA:C4:90:72:05:AF:4F:BE:D4:15:92 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1E87C6F9A2D50F020FFE4C Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fa7db860-e731-3890-9953-1b3723ef2812.roa Signing time: Fri 24 Apr 2026 23:20:49 +0000 ROA not before: Fri 24 Apr 2026 23:20:49 +0000 ROA not after: Thu 23 Jul 2026 23:20:49 +0000 asID: 7029 IP address blocks: 64.16.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:87:c6:f9:a2:d5:0f:02:0f:fe:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:20:49 2026 GMT Not After : Jul 23 23:20:49 2026 GMT Subject: CN=555d62db-ea5a-4b50-af1e-9297a8ebbaff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:f9:09:31:c9:1b:30:7a:67:44:ed:c4:2b: 9f:ed:ff:63:ea:d6:42:5f:11:a1:23:48:cb:58:c1: 54:c3:80:2a:41:1d:b2:34:28:37:86:00:52:1e:c5: 45:3f:86:af:bd:e5:25:40:2e:f1:56:11:9e:46:a3: 9d:bc:51:20:51:cd:c0:27:6d:54:3d:fa:17:3b:06: a3:60:c0:10:9a:cc:5a:1b:01:28:24:08:7a:ac:4a: 0c:a9:c0:4e:53:b0:9b:c8:8a:96:5d:bc:cf:fb:96: 70:75:01:f4:8b:43:0b:32:b9:86:62:ea:2b:3e:5a: f7:d2:9a:9e:b7:81:c0:65:e6:da:c7:00:3a:5c:3b: 9a:bd:c9:2f:df:a2:ed:98:18:df:9a:ba:07:67:cb: cb:df:f9:bc:8c:69:50:f3:fb:d7:aa:c2:a1:1b:21: 78:ed:74:60:7b:52:f9:f9:c9:76:de:aa:14:7a:e2: ee:4c:8f:78:71:20:a3:39:27:b2:68:78:8a:c4:14: f3:a3:be:8b:d4:ba:5c:46:fd:40:11:8e:b2:7a:6d: 38:90:75:85:38:7c:3f:6f:64:87:3c:f0:b5:38:e6: 16:89:5a:67:c5:8b:96:70:c0:ea:f2:a5:c0:fc:cb: 1f:c8:15:71:88:48:81:66:b4:4d:ec:b2:ef:f7:31: 21:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EB:64:F2:BC:C3:68:51:17:DA:C4:90:72:05:AF:4F:BE:D4:15:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fa7db860-e731-3890-9953-1b3723ef2812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e2:c0:df:07:df:77:1b:b6:29:35:76:c4:55:15:a4:33:fe: f2:10:c0:fb:3f:3c:b6:ce:dc:b9:0b:be:48:25:c8:4e:d8:94: 38:70:1e:98:d6:2f:91:7b:47:cf:45:fe:39:a0:d3:e8:59:5d: bf:d5:21:bd:b4:5d:12:af:46:83:50:75:f8:c8:d1:da:c9:8d: a6:6d:79:12:58:3b:79:fc:2c:a6:7a:6c:9c:28:4e:29:60:dd: da:13:05:84:65:ae:73:a1:94:6e:6d:da:2e:4b:5c:e3:4a:99: 2c:f9:1d:93:52:61:45:2f:df:19:fd:4c:c6:8d:87:ea:bd:34: 09:d4:38:6a:c5:b3:4a:a7:00:8f:cd:c8:b1:09:a3:93:1e:11: e1:a3:8d:d8:a4:47:f3:ae:b4:67:0c:8b:db:1b:ae:b4:1a:4e: 5c:bc:f1:b9:14:4f:a0:c0:f8:cd:06:52:30:38:49:44:04:ed: 28:1b:91:25:0a:87:f2:da:71:e0:bc:c2:d5:46:0a:00:39:b8: 8b:70:91:08:07:a1:d9:14:68:75:16:b1:09:94:98:0e:c0:28: 0e:66:8d:1f:35:57:00:da:ef:ef:5c:4d:74:cf:c9:a3:9e:29: a4:79:ad:78:ed:4a:61:43:85:73:5e:3c:4a:67:0a:ab:ba:81: d7:36:d3:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHofG+aLVDwIP/kwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjA0OVoXDTI2MDcyMzIzMjA0OVowLzEtMCsGA1UEAxMk NTU1ZDYyZGItZWE1YS00YjUwLWFmMWUtOTI5N2E4ZWJiYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTj5CTHJGzB6Z0TtxCuf7f9j6tZCXxGhI0jL WMFUw4AqQR2yNCg3hgBSHsVFP4avveUlQC7xVhGeRqOdvFEgUc3AJ21UPfoXOwaj YMAQmsxaGwEoJAh6rEoMqcBOU7CbyIqWXbzP+5ZwdQH0i0MLMrmGYuorPlr30pqe t4HAZebaxwA6XDuavckv36LtmBjfmroHZ8vL3/m8jGlQ8/vXqsKhGyF47XRge1L5 +cl23qoUeuLuTI94cSCjOSeyaHiKxBTzo76L1LpcRv1AEY6yem04kHWFOHw/b2SH PPC1OOYWiVpnxYuWcMDq8qXA/MsfyBVxiEiBZrRN7LLv9zEhBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArrZPK8w2hRF9rEkHIFr0++1BWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZmE3ZGI4NjAtZTczMS0z ODkwLTk5NTMtMWIzNzIzZWYyODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPiwN8H33cbtik1dsRVFaQz/vIQwPs/PLbO3LkLvkglyE7YlDhwHpjW L5F7R89F/jmg0+hZXb/VIb20XRKvRoNQdfjI0drJjaZteRJYO3n8LKZ6bJwoTilg 3doTBYRlrnOhlG5t2i5LXONKmSz5HZNSYUUv3xn9TMaNh+q9NAnUOGrFs0qnAI/N yLEJo5MeEeGjjdikR/OutGcMi9sbrrQaTly88bkUT6DA+M0GUjA4SUQE7SgbkSUK h/LaceC8wtVGCgA5uItwkQgHodkUaHUWsQmUmA7AKA5mjR81VwDa7+9cTXTPyaOe KaR5rXjtSmFDhXNePEpnCqu6gdc200c= -----END CERTIFICATE-----Generated at Wed May 13 11:59:35 2026 by rpki-client